REWE Markt GmbH

- REWE Markt GmbH -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0e:50:6d:27:72:df:67:72:90:77:d5:c9:8e:82:03:9f was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

REWE Markt GmbH

Company registration number: HRB 66773
Organization: REWE Markt GmbH
Address: Domstraße 20
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:50:6d:27:72:df:67:72:90:77:d5:c9:8e:82:03:9f
Serial Number (int): 19026789597768114613815099191143302047
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d4:79:f9:a2:f6:b0:b3:1a:7b:f1:14:31:f5:af:f1:78:51:fc:e4:43
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): cf:ce:c2:4d:4a:ce:69:6a:aa:5a:34:d8:5d:9f:a1:87:49:64:af:f3
Fingerprint (sha256): 5b:e2:4d:24:63:91:de:b0:5b:43:8f:84:e7:19:c6:b6:c7:05:65:c4:32:a1:82:25:24:5c:55:9f:a3:44:b5:dd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate REWE Markt GmbH

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for REWE Markt GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailing.rewe.de

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for REWE Markt GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry6Wqf6qcrmjpOvqSHCA
RszfSVKHH6kTIs5cwbhjRnlgMtkCLs3r8kIAFFoKTB2jTEhMA64CBD6fan3/vj1y
XwIcKNf6iEUQpVh39W2L0YXJc/UPBGpivhBBBBUtkmSDgz/v87cPg/w/hXTYvZPF
Fa32rwLB0UL08rhlY8GfOXqdEGzFrRuDRzpTFhIY0EzcjKaotXVzpXWpkjhBmh/C
kCIFVNC4+7vnJQNpqkt1NjG94QbtxeHsfEBbw9oojyiB+ExzoO+FojVCaupSYulP
3f6BRm+s6U8YQRMpbdEcajB/wothK8oO1KHmnBcVeNuUjJ6ULIMTbX3ACSJR9HSv
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19026789597768114613815099191143302047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 66773'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domstraße 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REWE Markt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REWE Markt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30645951'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22114677030140880807402635284617656752485171014720750300895795228342963251742070641591906654552527087469066540549950569753077960763059625223065531108706642333984968892322131459508336546906972147974255239233282617708073176922794487858787279305734560664154856771056864402655982293697005065153768679129947889573248788557734925017968500944098144703202864544489550783411476107770423661730690578708774773085608953231620635298680885031759268352804751167310336401014626536926069086722241137998832232775379174870449263619061504180052781485481871556191805608029212155582389414858992788119525846105517876981122655915733329162041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d479f9a2f6b0b31a7bf11431f5aff17851fce443
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.rewe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															37640716e63c0ace054e991281d6fac255c26d76
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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